oysteikt/heimdal
0
0
Fork 0
Code Issues 4 Pull Requests Releases Activity

Commit Graph

  • 4f875a4a85 sqlite Love Hörnquist Åstrand 2008-04-07 11:45:14 +00:00
  • d9cf4a930f More text about OpenLDAP. Love Hörnquist Åstrand 2008-04-04 17:09:55 +00:00
  • 04058a6184 sasl-regexp is now authz-regexp, from Quanah Gibson-Mount. Love Hörnquist Åstrand 2008-04-04 17:07:36 +00:00
  • 10bac51b0e x Love Hörnquist Åstrand 2008-04-01 07:48:18 +00:00
  • c47245b50c No patching of OpenLDAP is needed, from Buchan Milne. Love Hörnquist Åstrand 2008-04-01 07:48:12 +00:00
  • b05ce373bb x Love Hörnquist Åstrand 2008-03-28 11:34:20 +00:00
  • 921fee6f9c use the correct server name for logging. Ken'ichi Kamada 2008-03-28 08:21:23 +00:00
  • 675eab162e spelling Love Hörnquist Åstrand 2008-03-26 15:18:55 +00:00
  • 7a68e837f7 x Love Hörnquist Åstrand 2008-03-26 14:43:15 +00:00
  • ab73d921f4 Make the storing credential an atomic write(2) to avoid signal races, bug traced by Harald Bart and Lars Malinowsky. Love Hörnquist Åstrand 2008-03-26 14:43:11 +00:00
  • 28835ed555 spelling. Love Hörnquist Åstrand 2008-03-25 20:56:25 +00:00
  • e441ff3ead x Love Hörnquist Åstrand 2008-03-25 20:56:22 +00:00
  • 56663c51c4 Make erase_file() to locking too. Love Hörnquist Åstrand 2008-03-25 20:56:02 +00:00
  • f4557ede8b More people. Love Hörnquist Åstrand 2008-03-25 15:24:40 +00:00
  • 360bfcab37 Check if new credential cache exists, if not create one. Love Hörnquist Åstrand 2008-03-25 13:50:14 +00:00
  • 554c98d5fb x Love Hörnquist Åstrand 2008-03-25 13:33:46 +00:00
  • abd1354315 Make work when moving to a non-existant cred-cache. Love Hörnquist Åstrand 2008-03-25 13:33:42 +00:00
  • e9764e31f4 more verbose info. Love Hörnquist Åstrand 2008-03-25 13:33:38 +00:00
  • e28ac4acd9 Test krb5_cc_move(). Love Hörnquist Åstrand 2008-03-25 13:33:34 +00:00
  • adb952d840 Return KRB5_CC_NOSUPP on no kcm daemon in other end. Love Hörnquist Åstrand 2008-03-25 13:33:31 +00:00
  • 51feb996d3 add back k, its needed by consumers. Love Hörnquist Åstrand 2008-03-25 13:33:26 +00:00
  • dcaa26efaf x Love Hörnquist Åstrand 2008-03-25 12:58:09 +00:00
  • a8bbc776e9 Match man_MANS = files with directories in them. Love Hörnquist Åstrand 2008-03-25 12:58:05 +00:00
  • bdfb8e33c6 Drop unused variable krb5_kcmcache *k. Love Hörnquist Åstrand 2008-03-25 12:21:00 +00:00
  • a760147457 first implementation of kcm-move-cache Love Hörnquist Åstrand 2008-03-25 12:20:55 +00:00
  • d21ed38e71 add Björn Schlögl Love Hörnquist Åstrand 2008-03-25 10:03:36 +00:00
  • 3394928100 Move _krb5_pk_copy_error() within #ifdef (from Björn Schlögl) and rename to pk_copy_error Love Hörnquist Åstrand 2008-03-25 10:03:31 +00:00
  • fa99a3de21 <sys/bswap.h> cannot be included alone on NetBSD. From KAMADA Ken'ichi. Love Hörnquist Åstrand 2008-03-25 09:30:56 +00:00
  • 811319445f warnings on platforms where sig_atomic_t is not a int, from netbsd via Michael van Elst, Havard Eidnes and T K Spindler Love Hörnquist Åstrand 2008-03-24 19:13:46 +00:00
  • 06c8aed8b3 Test now works again with old client side capath referrals. Love Hörnquist Åstrand 2008-03-24 12:09:39 +00:00
  • 83135f5a0a x Love Hörnquist Åstrand 2008-03-24 12:09:35 +00:00
  • e46ef6c72a Try both kdc server referral and the old client chasing mode. Love Hörnquist Åstrand 2008-03-24 12:09:29 +00:00
  • 7acb20f92d x Love Hörnquist Åstrand 2008-03-24 12:09:25 +00:00
  • 2523a24965 Don't do canonicalize by default, make add_cred() sane, make loop detection in credential fetching better. Love Hörnquist Åstrand 2008-03-24 12:09:21 +00:00
  • 4ad33addfc x Love Hörnquist Åstrand 2008-03-24 12:09:17 +00:00
  • 8e36f33c5e Fix status messages. Love Hörnquist Åstrand 2008-03-24 12:09:14 +00:00
  • 1c5f41af0c x Love Hörnquist Åstrand 2008-03-24 12:09:10 +00:00
  • 20b3e07a73 Add flag EXTRACT_TICKET_AS_REQ. Love Hörnquist Åstrand 2008-03-24 12:09:06 +00:00
  • fbae90e671 Tell _krb5_extract_ticket that this is an AS-REQ. Love Hörnquist Åstrand 2008-03-24 12:09:02 +00:00
  • cdef379a85 x Love Hörnquist Åstrand 2008-03-24 12:08:58 +00:00
  • 2dd8a03423 Make server referral work. Love Hörnquist Åstrand 2008-03-24 12:08:55 +00:00
  • 090f16f717 better error message, try to handle server referrals slightly better. Love Hörnquist Åstrand 2008-03-24 12:08:51 +00:00
  • 70a94ea7d9 x Love Hörnquist Åstrand 2008-03-24 12:08:47 +00:00
  • 526b428c75 Make work for constrained delegation and impersonation. Love Hörnquist Åstrand 2008-03-24 12:08:43 +00:00
  • 70f23b007a x Love Hörnquist Åstrand 2008-03-24 12:08:39 +00:00
  • def5e96e15 Ident. Love Hörnquist Åstrand 2008-03-24 12:08:35 +00:00
  • 5d35e96f9f check no server referral, don't use stringent length tests since encryption layer does padding for us... Love Hörnquist Åstrand 2008-03-24 12:08:32 +00:00
  • e69ef1185c x Love Hörnquist Åstrand 2008-03-24 12:08:28 +00:00
  • 4ac470d33e Match name in ClientCanonicalizedNames with -10 Love Hörnquist Åstrand 2008-03-24 12:08:24 +00:00
  • 2f09ac3a2f x Love Hörnquist Åstrand 2008-03-24 12:08:20 +00:00
  • 967fc11320 (_krb5_principal_compare_PrincipalName): new function to compare a principal to a PrincipalName. Love Hörnquist Åstrand 2008-03-24 12:08:17 +00:00
  • 53a6738517 x Love Hörnquist Åstrand 2008-03-24 12:08:13 +00:00
  • fb540c9646 Move client referral checking to _krb5_extract_ticket(). Love Hörnquist Åstrand 2008-03-24 12:08:09 +00:00
  • d3d7661043 More bits for server referral. Love Hörnquist Åstrand 2008-03-24 12:08:05 +00:00
  • e1cb28d159 Make working with client referrals. Love Hörnquist Åstrand 2008-03-24 12:08:01 +00:00
  • 07479ebcde x Love Hörnquist Åstrand 2008-03-24 12:07:57 +00:00
  • e27db7b9b4 Match name in ClientCanonicalizedNames with -10 Love Hörnquist Åstrand 2008-03-24 12:07:54 +00:00
  • 28b73ab194 x Love Hörnquist Åstrand 2008-03-24 12:07:50 +00:00
  • e33ec47aaf Try moving referrals checking into _krb5_extract_ticket(). Love Hörnquist Åstrand 2008-03-24 12:07:46 +00:00
  • 940435a608 x Love Hörnquist Åstrand 2008-03-24 12:07:43 +00:00
  • eca9feff87 add referral-valid-until Love Hörnquist Åstrand 2008-03-24 12:07:39 +00:00
  • c3e55c1f54 Try moving referrals checking into _krb5_extract_ticket(). Love Hörnquist Åstrand 2008-03-24 12:07:34 +00:00
  • 424eede709 Rename tgs_build_referral to build_server_referral since it can be used for AS-REQ too. Love Hörnquist Åstrand 2008-03-24 12:07:31 +00:00
  • 99a3df5a8a Try client side guessing too. Love Hörnquist Åstrand 2008-03-24 12:07:27 +00:00
  • 1da2a3782e Add code to check PA_ServerReferralData. Love Hörnquist Åstrand 2008-03-24 12:07:22 +00:00
  • 5aaf35765e x Love Hörnquist Åstrand 2008-03-24 12:07:17 +00:00
  • 203a4ad7f1 Send SERVER-REFERRAL data in rep.padata instead of auth_data in ticket. Love Hörnquist Åstrand 2008-03-24 12:07:13 +00:00
  • d6845ca8a4 kill trailing whitespace Love Hörnquist Åstrand 2008-03-24 12:07:09 +00:00
  • 294999cc14 kill trailing whitespace Love Hörnquist Åstrand 2008-03-24 12:07:05 +00:00
  • b0aae2d071 x Love Hörnquist Åstrand 2008-03-24 12:07:01 +00:00
  • 0fd74cc5e4 remove lost bits from using krb5_principal_set_realm Love Hörnquist Åstrand 2008-03-24 12:06:57 +00:00
  • 31411663b5 x Love Hörnquist Åstrand 2008-03-24 12:06:53 +00:00
  • f57e7c4d5f Better referrals support, use canonicalize flag. Love Hörnquist Åstrand 2008-03-24 12:06:50 +00:00
  • 9ae2936124 use krb5_principal_set_realm Love Hörnquist Åstrand 2008-03-24 12:06:46 +00:00
  • 3d935af61d use krb5_principal_set_realm Love Hörnquist Åstrand 2008-03-24 12:06:42 +00:00
  • 457dbdfb8b use krb5_principal_set_realm Love Hörnquist Åstrand 2008-03-24 12:06:38 +00:00
  • ba287b247d add krb5_principal_set_realm Love Hörnquist Åstrand 2008-03-24 12:06:34 +00:00
  • de57423148 add krb5_principal_set_realm Love Hörnquist Åstrand 2008-03-24 12:06:30 +00:00
  • a86c4ec9ab Insecure tgs referrals. Love Hörnquist Åstrand 2008-03-24 12:06:26 +00:00
  • 6f69a2b8f9 x Love Hörnquist Åstrand 2008-03-24 12:06:22 +00:00
  • 5586e24dd3 More verbose checks, disable check that no longer works with referrals. Love Hörnquist Åstrand 2008-03-24 12:06:18 +00:00
  • 03092c3e9a Fix [domain_realm] section. Love Hörnquist Åstrand 2008-03-24 12:06:12 +00:00
  • 756ead1cd9 Find_cred to try krb5_cc_retrieve_cred first, remove comment. Love Hörnquist Åstrand 2008-03-24 12:06:08 +00:00
  • 1e5e118bcf Fix error message to match function called. Love Hörnquist Åstrand 2008-03-24 12:06:04 +00:00
  • 92e7251a36 Refactor code to flatten the call-tree. Love Hörnquist Åstrand 2008-03-24 12:06:00 +00:00
  • cd06f67cdb x Love Hörnquist Åstrand 2008-03-24 12:05:56 +00:00
  • c3d816441f x Love Hörnquist Åstrand 2008-03-24 12:05:52 +00:00
  • e5baf09800 Dont try key usage KRB5_KU_AP_REQ_AUTH for TGS-REQ. This drop compatibility with pre 0.3d KDCs. Love Hörnquist Åstrand 2008-03-24 12:05:49 +00:00
  • 50901132f0 Also check KDCOptions->canonicalize when looking for referrals requests. Love Hörnquist Åstrand 2008-03-24 12:05:45 +00:00
  • 098a497638 x Love Hörnquist Åstrand 2008-03-24 12:05:41 +00:00
  • b2aff2d2bd x Love Hörnquist Åstrand 2008-03-24 12:05:38 +00:00
  • ecd4be81f0 set KRB5_GC_CANONICALIZE. Love Hörnquist Åstrand 2008-03-24 12:05:34 +00:00
  • 2b861313a8 set KRB5_GC_CANONICALIZE. Love Hörnquist Åstrand 2008-03-24 12:05:30 +00:00
  • 829360b3f6 Catch KRB5_GC_CANONICALIZE. Love Hörnquist Åstrand 2008-03-24 12:05:26 +00:00
  • 9a041ab3e3 x Love Hörnquist Åstrand 2008-03-24 12:05:22 +00:00
  • 395d4e88af Test TGS referrals. Love Hörnquist Åstrand 2008-03-24 12:05:18 +00:00
  • 3fdb2ae3e3 x Love Hörnquist Åstrand 2008-03-24 12:05:14 +00:00
  • 2f7728caff Add stub --canonicalize implementation. Love Hörnquist Åstrand 2008-03-24 12:05:10 +00:00
  • b9f88cce4c first version of the tgs referrals pathcheck Love Hörnquist Åstrand 2008-03-24 12:05:02 +00:00
  • 68c7f7560e Update to match new API for windc interface. Love Hörnquist Åstrand 2008-03-22 22:20:29 +00:00